longhorn 1.2.3 Helm chart

Name: longhorn Helm chart 1.2.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wener

Not scored yet

Longhorn is a distributed block storage system for Kubernetes.

Version 1.2.3 4 years agoapp version v1.2.3 0Artifact Hub

longhorn 1.2.3 deploys 2 container images: longhornio/longhorn-manager and longhornio/longhorn-ui. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.10, fixed in 1.1.1f-1ubuntu2.15. Chart.yaml declares kubeVersion >=1.18.0-0; rendered for Kubernetes 1.18.0.

Radar Score

Not yet scored

The daily scoring run has not folded the 2 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
longhornio/longhorn-manager×5	v1.2.3	829285672	14,582
longhornio/longhorn-ui	v1.2.3	07192	855

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,022 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	UBUNTU-CVE-2022-2068	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.15
Critical	UBUNTU-CVE-2021-3711	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.fips.7.2
Critical	UBUNTU-CVE-2022-1292	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.13
Critical	UBUNTU-CVE-2022-29155	openldap@2.4.49+dfsg-2ubuntu1.8	2.4.49+dfsg-2ubuntu1.9
Critical	UBUNTU-CVE-2023-44487KEV	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2
Critical	UBUNTU-CVE-2023-50387	bind9@1:9.16.1-0ubuntu2.9	1:9.16.48-0ubuntu0.20.04.1
Critical	UBUNTU-CVE-2023-50868	bind9@1:9.16.1-0ubuntu2.9	1:9.16.48-0ubuntu0.20.04.1
Critical	UBUNTU-CVE-2024-2961	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.15
High	UBUNTU-CVE-2022-25236	expat@2.2.9-1build1	2.2.9-1ubuntu0.2
High	UBUNTU-CVE-2025-6965	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1
High	ALPINE-CVE-2022-0778	openssl@1.1.1l-r0	1.1.1n-r0
High	UBUNTU-CVE-2022-0778	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.12
High	UBUNTU-CVE-2007-4559	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed
High	UBUNTU-CVE-2023-0286	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.17
High	UBUNTU-CVE-2024-2398	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.22
High	ALPINE-CVE-2018-25032	zlib@1.2.11-r3	1.2.12-r0
High	UBUNTU-CVE-2018-25032	zlib@1:1.2.11.dfsg-2ubuntu1.2	1:1.2.11.dfsg-2ubuntu1.3
High	UBUNTU-CVE-2021-23840	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.fips.7.2
High	UBUNTU-CVE-2023-2650	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.19
High	UBUNTU-CVE-2021-3712	openssl@1.1.1f-1ubuntu2.10	no fix listed
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.0.0-20231218163308-9d2ee975ef9f
High	UBUNTU-CVE-2023-48795	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4
High	ALPINE-CVE-2022-37434	zlib@1.2.11-r3	1.2.12-r2
High	UBUNTU-CVE-2022-37434	zlib@1:1.2.11.dfsg-2ubuntu1.2	1:1.2.11.dfsg-2ubuntu1.5
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.17.0
High	ALPINE-CVE-2021-30560	libxslt@1.1.34-r0	1.1.35-r0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.23.0
High	UBUNTU-CVE-2021-3449	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.fips.7
High	UBUNTU-CVE-2024-28182	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.3
High	UBUNTU-CVE-2022-0572	vim@2:8.1.2269-1ubuntu5.4	2:8.1.2269-1ubuntu5.14
High	UBUNTU-CVE-2024-2511	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.23
High	UBUNTU-CVE-2024-3596	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.8
High	ALPINE-CVE-2022-40303	libxml2@2.9.12-r0	2.9.14-r2
High	UBUNTU-CVE-2022-40303	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.5
High	UBUNTU-CVE-2022-35737	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.5
High	GHSA-7fxm-f474-hf8w	k8s.io/kubernetes@v1.18.19	1.24.17
High	ALPINE-CVE-2022-32206	curl@7.79.1-r0	7.79.1-r2
High	UBUNTU-CVE-2022-32206	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.12
High	UBUNTU-CVE-2023-24329	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.8
High	UBUNTU-CVE-2022-4450	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.17
High	UBUNTU-CVE-2024-12705	bind9@1:9.16.1-0ubuntu2.9	1:9.18.30-0ubuntu0.20.04.2
High	UBUNTU-CVE-2021-23336	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed
High	UBUNTU-CVE-2024-11187	bind9@1:9.16.1-0ubuntu2.9	1:9.18.30-0ubuntu0.20.04.2
High	ALPINE-CVE-2022-32207	curl@7.79.1-r0	7.79.1-r2
Medium	GO-2024-2687	stdlib@go1.14.1	1.21.9
Medium	UBUNTU-CVE-2022-3094	bind9@1:9.16.1-0ubuntu2.9	1:9.16.1-0ubuntu2.12
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.52.0
Medium	UBUNTU-CVE-2022-37454	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.6
Medium	UBUNTU-CVE-2025-8677	bind9@1:9.16.1-0ubuntu2.9	1:9.18.30-0ubuntu0.20.04.2+esm1
Medium	UBUNTU-CVE-2022-25235	expat@2.2.9-1build1	2.2.9-1ubuntu0.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.3latest	4 years ago	v1.2.3	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wener/longhorn.svg)](https://charts.stackradar.io/charts/wener/longhorn)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.